DOCKET NO.: MSFT-2858/301 129.01 
Application No.: 10/766,060 
Office Action Dated: June 13, 2007 



PATENT 



This listing of claims will replace all prior versions, and listings, of claims in the application. 
Listing of Claims: 

1 . (Withdrawn) A method for a multiparty transaction, the method comprising: 

receiving at a second computing device a message from a first computing device, the 
message comprising multiple encrypted portions; 

decrypting a first portion of the message, the first portion having first data related to a 
first task of the multiparty transaction and wherein the first data is decrypted using a first 
decryption key known to the second computing device; and 

forwarding a second portion of the message to a third computing device, the second 
portion having second data related to a second task of the multiparty transaction and wherein 
the second data is decrypted using a second decryption key known to the third computing 
device. 

2. (Withdrawn) The method of claim 1, further comprising: 

receiving at the second computing device a message from the third computing device 
indicating a status of the second task of the multiparty transaction; and 

transmitting a message from the second computing device to the first computing 
device indicating a status of the multiparty transaction; wherein a status the first task of the 
transaction and a status of the second task of the transaction are known to the second 
computing device. 

3. (Withdrawn) The method of claim 1, further comprising: 

receiving from the first computing device a message to execute the multiparty 
transaction; and 
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sending a message from the second computing device to the third computing device a 
message to execute the second task of the multiparty transaction. 

4. (Withdrawn) The method of claim 3 wherein the message to execute the multiparty 
transaction is encrypted with a first encryption key and the message to execute the second 
task of the transaction is encrypted with a second encryption key. 

5. (Withdrawn) The method of claim 1 9 wherein the forwarding step further comprises 
forwarding both the first portion of the message and the second portion of the message to the 
third computing device. 

6. (Withdrawn) The method of claim 5, wherein the third computing device is prevented 
from decrypting the first portion of the message by not having access to the first decryption 
key. 

7. (Withdrawn) The method of claim 1, wherein the second computing device is 
prevented from decrypting the second portion of the message by not having access to the 
second decryption key. 

8. (Original) A method of protecting a message having information in a multiparty 
transaction, the method comprising: 

obtaining identities of at least two transaction participants in the multiparty 
transaction; 

obtaining cryptographic information corresponding to the at least two transaction 
participants; 

dividing the information into segments wherein a relevant portion of the information 
is placed into at least two segments corresponding to the at least two identities of the 
transaction participants; and 
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cryptographically encoding the divided segments using the cryptographic information 
corresponding to the transaction participants. 

9. (Original) The method of claim 8, wherein obtaining identities of at least two 
transaction participants comprises acquiring the identities from one of the transaction 
participants. 

10. (Original) The method of claim 8, wherein obtaining cryptographic information 
comprises acquiring cryptographic information from at least one of a directory and 
cryptographic identity provider. 

1 1 . (Original) The method of claim 10, wherein the cryptographic identity provider is not 
one of the transaction participants. 

12. (Original) The method of claim 8, wherein dividing the information into segments 
comprises placing only a portion of the information which is needed by a particular 
transaction participant into a segment encrypted for the particular participant. 

13. (Original) The method of claim 8, further comprising: 

transmitting a cryptographically encoded segment to only a cryptographically 
corresponding transaction participant. 

14. (Original) The method of claim 8, further comprising: 

transmitting the cryptographically encoded segments to the at least two transaction 
participants. 

15. (Original) A method of controlling data content exposure in a multiparty transaction, 
the method comprising: 
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obtaining, from a primary transaction participant, at least two identities of secondary 
transaction participants to be involved in a multiparty transaction; 

obtaining cryptographic information for the at least two secondary transaction 
participants, each secondary transaction participant having unique cryptographic information; 

cryptographically encoding information for the at least two secondary transaction 
participants such that a data content and unique encryption are used for each secondary 
transaction participant; and 

transmitting the cryptographically encoded information. 

16. (Original) The method of claim 15, wherein transmitting the cryptographically 
encoded information comprises transmitting the cryptographically encoded information to the 
primary transaction participant. 

17. (Original) The method of claim 16, further comprising: 

receiving status from the primary transaction participant concerning a successful 
examination of data content by one or more of the at least two secondary transaction 
participants, whereby multiparty transaction status is assessed. 

18. (Original) The method of claim 15, wherein cryptographically encoding information 
for the at least two secondary transaction participants comprises encoding a data content that 
is unique for at least one of the at least two secondary transaction participants. 

19. (Original) The method of claim 15, further comprising transmitting a message request 
to act upon the information represented by the data content so as to execute the multiparty 
transaction. 

20. (Withdrawn) A computer-readable medium having computer-executable instructions 
for performing a method for a multiparty transaction, the method comprising: 
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receiving at a second computing device a message from a first computing device, the 
message comprising multiple encrypted portions; 

decrypting a first portion of the message, the first portion having first data related to a 
first task of the multiparty transaction and wherein the first data is decrypted using a first 
decryption key known to the second computing device; and 

forwarding a second portion of the message to a third computing device, the second 
portion having second data related to a second task of the multiparty transaction and wherein 
the second data is decrypted using a second decryption key known to the third computing 
device. 

21 . (Withdrawn) The computer-readable medium of claim 20, further comprising method 
steps of: 

receiving at the second computing device a message from the third computing device 
indicating a status of the second task of the multiparty transaction; and 

transmitting a message from the second computing device to the first computing 
device indicating a status of the multiparty transaction; wherein a status the first task of the 
transaction and a status of the second task of the transaction are known to the second 
computing device. 

22. (Withdrawn) The computer-readable medium of claim 20, further comprising method 
steps of: 

receiving from the first computing device a message to execute the multiparty 
transaction; and 

sending a message from the second computing device to the third computing device a 
message to execute the second task of the multiparty transaction. 
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23 . (Withdrawn) The computer-readable medium of claim 20 wherein the message to 
execute the multiparty transaction is encrypted with a first encryption key and the message to 
execute the second task of the transaction is encrypted with a second encryption key. 

24. (Withdrawn) The computer-readable medium of claim 20, wherein the forwarding 
step further comprises forwarding both the first portion of the message and the second portion 
of the message to the third computing device. 

25. (Withdrawn) The computer-readable medium of claim 20, wherein the third 
computing device is prevented from decrypting the first portion of the message by not having 
access to the first decryption key. 

26. (Original) A computer-readable medium having computer-executable instructions for 
performing a method of protecting a message having information in a multiparty transaction, 
the method comprising: 

obtaining identities of at least two transaction participants in the multiparty 
transaction; 

obtaining cryptographic information corresponding to the at least two transaction 
participants; 

dividing the information into segments wherein a relevant portion of the information 
is placed into at least two segments corresponding to the at least two identities of the 
transaction participants; and 

cryptographically encoding the divided segments using the cryptographic information 
corresponding to the transaction participants. 

27. (Original) The computer-readable medium of claim 26, wherein obtaining identities 
of at least two transaction participants comprises acquiring the identities from one of the 
transaction participants. 
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28. (Original) The computer-readable medium of claim 26, wherein obtaining 
cryptographic information comprises acquiring cryptographic information from at least one 
of a directory and cryptographic identity provider. 

29. (Original) The computer-readable medium of claim 26, wherein dividing the 
information into segments comprises placing only a portion of the information which is 
needed by a particular transaction participant into a segment encrypted for the particular 
participant. 

30. (Original) The computer-readable medium of claim 26, further comprising: 

transmitting a cryptographically encoded segment to only a cryptographically 
corresponding transaction participant. 

3 1 . (Original) The computer-readable medium of claim 26, further comprising: 

transmitting the cryptographically encoded segments to the at least two transaction 
participants. 

32. (Withdrawn) A system for a multiparty transaction, the system comprising: 

a processor having access to memory, the memory having instructions which, when 
executed, perform the method comprising: 

receiving at a second computing device a message from a first computing device, the 
message comprising multiple encrypted portions; 

decrypting a first portion of the message, the first portion having first data related to a 
first task of the multiparty transaction and wherein the first data is decrypted using a first 
decryption key known to the second computing device; and 
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forwarding a second portion of the message to a third computing device, the second 
portion having second data related to a second task of the multiparty transaction and wherein 
the second data is decrypted using a second decryption key known to the third computing 
device. 

33. (Withdrawn) The system of claim 32, wherein the instructions performing the method 
further comprise: 

receiving at the second computing device a message from the third computing device 
indicating a status of the second task of the multiparty transaction; and 

transmitting a message from the second computing device to the first computing 
device indicating a status of the multiparty transaction; wherein a status the first task of the 
transaction and a status of the second task of the transaction are known to the second 
computing device. 

34. (Withdrawn) The system of claim 32, wherein the instructions performing the method 
further comprise: 

receiving from the first computing device a message to execute the multiparty 
transaction; and 

sending a message from the second computing device to the third computing device a 
message to execute the second task of the multiparty transaction. 

35. (Original) A system comprising: 

a processor having access to memory, the memory having instructions which, when 
executed, perform the method of protecting a message having information in a multiparty 
transaction, the method comprising: 



Page 9 of 13 



DOCKET NO.: MSFT-2858/301 129.01 
Application No.: 10/766,060 
Office Action Dated: June 13, 2007 



PATENT 



obtaining identities of at least two transaction participants in the multiparty 

transaction; 

obtaining cryptographic information corresponding to the at least two 
transaction participants; 

dividing the information into segments wherein a relevant portion of the 
information is placed into at least two segments corresponding to the at least two identities of 
the transaction participants; and 

cryptographically encoding the divided segments using the cryptographic 
information corresponding to the transaction participants. 

36. (Original) The system of claim 35, wherein the instructions having the method step of 
obtaining identities of at least two transaction participants comprise acquiring the identities 
from one of the transaction participants. 

37. (Original) The system of claim 35, wherein the instruction having the method step of 
obtaining cryptographic information comprise acquiring cryptographic information from at 
least one of a directory and cryptographic identity provider. 

38. (Original) The system of claim 35, wherein the instructions having the method step of 
dividing the information into segments comprise placing only a portion of the information 
which is needed by a particular transaction participant into a segment encrypted for the 
particular participant. 

39. (Original) The system of claim 35, wherein the instructions performing the method 
further comprise: 

transmitting a cryptographically encoded segment to only a cryptographically 
corresponding transaction participant. 
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40. (Original) The system of claim 35, wherein the instructions performing the method 
further comprise: 

transmitting the cryptographically encoded segments to the at least two transaction 
participants. 

4 1 . (Original) A system comprising: 

a processor having access to memory, the memory having instructions which, when 
executed, perform the method of controlling data content exposure in a multiparty 
transaction, the method comprising: 

obtaining, from a primary transaction participant, at least two identities of 
secondary transaction participants to be involved in a multiparty transaction; 

obtaining cryptographic information for the at least two secondary transaction 
participants, each secondary transaction participant having unique cryptographic information; 

cryptographically encoding information for the at least two secondary 
transaction participants such that a data content and unique encryption are used for each 
secondary transaction participant; and 

transmitting the cryptographically encoded information. 

42. (Original) The system of claim 41, wherein the instructions performing the method 
step of transmitting the cryptographically encoded information comprise transmitting the 
cryptographically encoded information to the primary transaction participant. 

43 . (Original) The system of claim 4 1 , wherein the instructions performing the method 
further comprise: 
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receiving status from the primary transaction participant concerning a successful 
examination of data content by one or more of the at least two secondary transaction 
participants, whereby multiparty transaction status is assessed. 

44. (Original) The system of claim 41, wherein the instructions performing the method 
step of cryptographically encoding information for the at least two secondary transaction 
participants comprise encoding a data content that is unique for at least one of the at least two 
secondary transaction participants. 

45. (Original) The method of claim 41, wherein the instructions performing the method 
steps further comprise transmitting a message request to act upon the information represented 
by the data content so as to execute the multiparty transaction. 
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